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Amendments to the Claims; 

This listing of claims will replace all prior versions, and 
listings, of claims in the application: 

Listing of Claims; 

1. (Previously Presented) An authentication engine 
architecture for a multi-loop, multi-round authentication 
algorithm, comprising: 

a first instantiation of a multi-round authentication 
algorithm hash round logic in an inner hash engine; 

a second instantiation of a multi-round authentication 
algorithm hash round logic in an outer hash engine; 

a dual -frame payload data input buffer configured for 
loading one new data block while another data block is being 
processed in the inner hash engine; 

an initial hash state input buffer configuration for 
loading initial hash states to the inner and outer hash engines 
for concurrent inner hash and outer hash operations; and 

a dual-ported ROM configured for concurrent constant 
lookups for both inner and outer hash engines . 

2. (Original) The authentication engine architecture 
of claim 1, wherein the multi-loop, multi-round authentication 
algorithm is HMAC-MD5 . 

3. (Original) The authentication engine architecture 
of claim 1, wherein the multi-loop, multi-round authentication 
algorithm is HMAC-SHAl. 
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4. (Original) The authentication engine architecture 
of claim 1, wherein at least one of the inner and outer hash 
engines is configured to implement hash round logic including at 
least one addition module comprising: 

a plurality of carry save adders for computation of 
partial products; and a carry look-ahead adder for 
computation and propagation of a final sum, 

5. (Original) The authentication engine of claim 4, 
wherein the carry save adders and the carry look-ahead adder are 
configured such that addition computations are conducted in 
parallel with round operations. 

6. (Original) The authentication engine architecture 
of claim 3, wherein at least one of the inner and outer hash 
engines is configured to implement hash round logic comprising: 

five hash state registers; 

one critical and four non-critical data paths associated 
with the five registers, such that in successive SHAl rounds, 
registers having the critical path are alternative. 

7. (Original) The authentication engine architecture 
of claim 6, wherein said hash round logic is implemented such 
that eighty rounds of an SHAl loop are collapsed into forty 
rounds . 
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8. (Original) The authentication engine architecture 

of claim 3, wherein at least one of the inner and outer hash 
engines is configured to implement hash round logic comprising: 

five hash state registers; 

a 5-bit circular shifter; 

an addStol adder module having a plurality of CSAs and a 
CLA adder; 

a 30-bit circular shifter; and 

an add4tol adder module having a plurality of CSAs and a 
CLA adder . 



9. (Currently Amended) An authentication engine 
architecture for a multi-round authentication algorithm, 
comprising : 

a hash engine configured to implement hash round logic for 
a multi-round authentication algorithm, said hash round logic 

implementation including loaat ene addition modulo a 

plurality of addition modules each comprising, 

a plurality of carry save adders for computation of partial 
products, and 

a carry look-ahead adder , configured to receive at least a 
portion of the partial products, for computation and propagation 
of a final sum. 

10. (Currently Amended) The authentication engine of claim 
9, wherein the carry save adders and the carry look-ahead adder 
are configured such that addition computations are conducted in 
parallel with round operations of the multi-round authentication 
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algorithm. 



11. (Original) The authentication engine architecture 
of claim 9, wherein the multi-round authentication algorithm is 
MD5. 

12. (Original) The authentication engine architecture 
of claim 9, wherein the multi-round authentication algorithm is 
SHAl. 

13. (Original) The authentication engine architecture 
of claim 12, wherein the hash round logic implementation 
comprises: 

five hash state registers; 
a 5-bit circular shifter; 

an add5tol adder module having a plurality of CSAs and a 
CLA adder; 

a 30-bit circular shifter; and 

an add4tol adder module having a plurality of CSAs and a 
CLA adder. 

14 . (Canceled) 



15. (Currently Amended) ^Pfee authentication ongino 

architQcturQ — — claim — 3r4-r An authentication engine architecture 
for an SHAl authentication algorithm, comprising: 

at least one hash engine configured to implement hash round 
logic comprising: 
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five hash state registers; 

one critical and four non-critical data paths associated 
with the five registers, such that in successive SHAl rounds, 
registers having the critical path are alternative; 

wherein said hash round logic is implemented such that 
eighty rounds of an [[SHAI]] SHAl loop are collapsed into forty 
rounds . 

16. (Original) A method of authenticating data 
transmitted over a computer network, comprising: 

receiving a data packet stream; 

splitting the packet data stream into fixed-size data 
blocks ; and 

processing the fixed-size data blocks using a multi-loop, 
multi-round authentication engine architecture having a hash 
engine core comprising an inner hash engine and an outer hash 
engine, said architecture configured to, 

pipeline hash operations of said inner hash and outer 

hash engines, 

collapse and rearrange multi-round logic to reduce 
rounds of hash operations, and 

implement multi-round logic to schedule addition 
computations to be conducted in parallel with round 
operations . 

17. (Original) The method of claim 16, wherein said 
pipelining comprises performance of an outer hash operation for 
one data payload in parallel with an inner hash operation of a 
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second data payload in a packet stream fed to the authentication 
engine . 

18. (Original) The method of claim 17, wherein a dual- 
frame input buffer is used for the inner hash engine. 

19. (Original) The method of claim 18, wherein initial 
hash states for the hash operations are double buffered for 
concurrent inner hash and outer hash operations. 

20. (Original) The method of claim 19, wherein 
concurrent constant lookups are performed from a dual-ported ROM 
by both inner and outer hash engines . 

21. (Original) The method of claim 16, wherein the 
multi-loop, multi-round authentication algorithm is MD5 . 

22. (Original) The method of claim 16, wherein the 
multi-loop, multi-round authentication algorithm is SHAl . 

23. (Original) The method of claim 22 wherein said 
scheduling of additions comprises: 

conducting a 5-bit circular shift on data from a first 
register; 

adding an initial hash state in a second register, a first 
payload data block, a first constant, and the result of a 
function (Ft) of the initial hash states in third, fourth and 
fifth additional registers with an addStol adder module having a 
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plurality of CSAs and a CLA adder; 

conducting a 30-bit circular shift on data from the third 
additional register; and 

adding the initial hash state in the fourth additional 
register to a second payload block, a second constant, and the 
result of a function (Ft) of the initial hash states in the first 
and fifth registers and the shifted hash state of the third 
register with an add4tol adder module having a plurality of CSAs 
and a CLA adder . 

24. (Original) The method of claim 22, wherein said 
collapsing and rearranging of the multi-round logic comprises: 

providing five hash state registers; and 

providing data paths from said five state registers such 
that four of the five data paths from the registers in any SHAl 
round are not timing critical. 

25. (Original) The method of claim 24, wherein, in 
successive SHAl rounds, registers having the critical path are 
alternative . 

26. (Original) The method of claim 25, wherein eighty 
rounds of an SHAl loop are collapsed into forty rounds. 

27. (Currently Amended) A method of authenticating data 
transmitted over a computer network, comprising: 

receiving a data packet stream; 

splitting the packet data stream into fixed-size data 
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blocks; and 

processing the fixed-size data blocks using a multi-round 
authentication engine architecture, said architecture 
implementing hash round logic for a multi-round authentication 
algorithm configured to schedule addition computations for 
adding a predefined number of ending hash states of a block to 
initial hash states for the block ^te — be — conductod in parallel 
with round operations for the block . 

28. (Original) The method of claim 27 wherein said 
hash round logic comprises: 

conducting a 5-bit circular shift on data from a first 
register; 

adding an initial hash state in a second register, a first 
payload data block, a first constant, and the result of a 
function (Ft) of the initial hash states in third, fourth and 
fifth additional registers with an addStol adder module having a 
plurality of CSAs and a CLA adder; 

conducting a 30-bit circular shift on data from the third 
additional register; and 

adding the initial hash state in the fourth additional 
register to a second payload block, a second constant, and the 
result of a function (Ft) of the initial hash states in the first 
and fifth registers and the shifted hash state of the third 
register with an add4tol adder module having a plurality of CSAs 
and a CLA adder . 

29. (Canceled) 
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30. (Canceled) 

31. (Currently Amended) ^fee — method — — claim — 3-0-r A method 
of authenticating data transmitted over a computer network using 
an SHAl authentication algorithm, comprising: 

providing five hash state registers; and 

providing data paths from said five state registers such 
that four of the five data paths from the registers in any SHAl 
round are not timing critical; 

wherein, in successive SHAl rounds, registers having the 
critical path are alternative; 

wherein eighty rounds of an SHAl loop are collapsed into 
forty rounds . 

32. (New) The authentication engine architecture of 
claim 1, comprising a multiplexer for controlling flow of data 
blocks from frames of the dual-frame payload data input buffer 
to the inner hash engine. 

33. (New) The authentication engine architecture of 
claim 1 wherein the dual-frame payload data input buffer: 

distributes input data payloads between frames of the dual- 
frame payload data input buffer; 

splits the input data payloads into 512-bit data blocks; 

and 

pads the data blocks, as necessary. 
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34. (New) The authentication engine architecture of 
claim 1, wherein: 

the dual- frame payload data input buffer provides a first 
packet to the inner hash engine before providing a second packet 
to the inner hash engine; and 

when the initial hash state input buffer outputs initial 
hash states associated with the first packet to the inner hash 
engine, the initial hash state input buffer loads initial hash 
states associated with the first packet from a first buffer to a 
second buffer for subsequent outputting to the outer hash 
engine . 

35. (New) The authentication engine architecture of 
claim 34, wherein when the initial hash state input buffer 
outputs initial hash states associated with the first packet to 
the inner hash engine, initial hash states associated with the 
second packet for the inner and outer hash engines are loaded 
into buffers in the initial hash state input buffer. 

36. (New) The authentication engine architecture of 
claim 1, wherein the dual-ported ROM concurrently provides 
constant data to the first hash engine via a first port and 
provides constant data to the second hash engine via a second 
port . 

37. (New) The authentication engine architecture of 
claim 1, wherein: 

the dual-frame payload data input buffer provides a first 
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payload to the inner hash engine before providing a second 
payload to the inner hash engine; and 

the outer hash engine performs hash operations for the 
first payload while the inner hash engine performs hash 
operations for the second payload. 

38. (New) The method of claim 16, wherein the 
implement multi-round logic comprises schedule addition 
computations for adding a predefined number of ending hash 
states of a block to initial hash states for the block in 
parallel with round operations for the block. 

39. (New) An authentication engine architecture for an 
SHAl authentication algorithm, comprising: 

at least one hash engine configured to implement hash round 
logic comprising: 

five hash state registers; 
a 5-bit circular shifter; 

an add5tol adder module having a plurality of CSAs and a 
CLA adder; 

a 30-bit circular shifter; and 

an add4tol adder module having a plurality of CSAs and a 
CLA adder . 

40. (New) An authentication engine architecture for an 
SHAl authentication algorithm, comprising: 

at least one hash engine configured to implement two hash 
rounds in one round comprising: 
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five hash state registers; 

a plurality of 5-bit circular shifters; 

a plurality of adder modules; 

a plurality of 30-bit circular shifters; and 
a plurality of non-linear function generators. 
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